Deployment Architecture

How to add a new search head to an existing SHC?

ram254481493
Explorer

Hello , we are planning to add a new search head to our existing search head cluster.
What are the steps I need to follow to properly to add a new member to our existing search head cluster?
We are pushing configs through deployer, so what is a command that I can use to update the new member with existing deployer and other search head settings?

0 Karma

amitm05
Builder

You need to initialize and then Add this instance to the cluster. This can be done by running the following commands on your new instance

To initialize, run the below command and restart-

splunk init shcluster-config -auth <username>:<password> -mgmt_uri <URI>:<management_port> -replication_port <replication_port> -replication_factor <n> -conf_deploy_fetch_url <URL>:<management_port> -secret <security_key> -shcluster_label <label>  
splunk restart 

To Add instance to Cluster, run this command -

splunk add shcluster-member -current_member_uri <URI>:<management_port>

Let me know if this helps

harsmarvania57
SplunkTrust
SplunkTrust

ram254481493
Explorer

Thanks i found the commands to update the configs here for SHC settings but didnt find the resync command to update the deployer configs .

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust

You do not require to resync, when you add new SH to SHC it will automatically get configuration bundle from Deployer and then it will contact Captain & download replicated config tarball.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...